<br><br><br><br>Dear all,<br><br>I'm working on a project that involves a secure installation of a <br>web blog and a Jabber messenger service through Tor Hidden services.<br><br><br><br>I'm aware of SSL man in the middle attacks by rogue tor relay servers,<br>
how to protect login credential of the administrators and users while<br>accessing the services? which is correct mitigation approach?<br><br>No SSL enabled?<br><br>Self generated SSL certificates?<br><br>Other form of confidentiality and integrity protection?<br>
<br><br>Maybe my questions will sound a bit stupid and basic, anyway<br>thanks in advance for any response.<br><br>Alex<br>